VMware Communities: Is VIPerl export controlled? ...

VMware

Up to Discussions in vSphere Web Services SDK

Sample Code
Tech Exchange

vSphere Web Services SDK:

This Question is Possibly Answered

1 "correct" answer available (10 pts)

9 Replies Last post: Aug 14, 2008 11:01 AM by c_shanklin

Is VIPerl export controlled? posted: Aug 12, 2008 4:33 PM

znmeb

39 posts since
Feb 8, 2004

The Windows version of the VI Perl Toolkit contains ActiveState Perl and some packages from CPAN. Some of the ActiveState products contain crypto technology. They are export-controlled and can only be sent to the US and Canada. Is that the case for the VI Perl Toolkit?

Tags: viperl, perl, toolkit, export, control, crypto

Re: Is VIPerl export controlled?

1. Aug 13, 2008 6:58 AM

in response to: znmeb

Texiwill

10,205 posts since
Jan 13, 2004

Hello,

Moved to the Developers forum Management APIs (VI Perl, VI SDK, CIM SDK)

Note that the VIPerl Appliance may be export controlled. However, you can have the users download and install from the VMware Site the perl modules for their version of perl. You need to also find out if you can 'ship' the perl modules independently.

Best regards,
Edward L. Haletky
VMware Communities User Moderator
====
Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.
CIO Virtualization Blog: http://www.cio.com/blog/index/topic/168354
As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization

Re: Is VIPerl export controlled?

2. Aug 13, 2008 7:30 AM

in response to: Texiwill

znmeb

39 posts since
Feb 8, 2004

This isn't the "appliance" -- it's the Windows installer at http://www.vmware.com/downloads/download.do?downloadGroup=VI-PT-U2. VI Perl Toolkit - Windows Installer (.exe)

Installer for Microsoft Windows includes ActiveState Perl (Please see the release notes for supported versions)

I don't see anything in the EULA about export controls for any of the versions. But I'm only interested in the ActiveState version at the moment.

Re: Is VIPerl export controlled?

3. Aug 13, 2008 7:53 AM

in response to: znmeb

Texiwill

10,205 posts since
Jan 13, 2004

Hello,

If ActiveState has controls then yes you are bound by them. I also think including ActiveState may be an issue with VI Perl for windows. But they could also have removed the encryption modules as well. I would fall back on what ActiveState says.

Best regards,
Edward L. Haletky
VMware Communities User Moderator
====
Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.
CIO Virtualization Blog: http://www.cio.com/blog/index/topic/168354
As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization

Re: Is VIPerl export controlled?

4. Aug 13, 2008 8:00 AM

in response to: Texiwill

znmeb

39 posts since
Feb 8, 2004

I just spent about 20 minutes on the ActiveState site. I couldn't find anything on export controls for ActivePerl. What's worse, I know Komodo used to be export controlled, but I can't find anything on that either now! I guess I need to go ask questions on their forum again.

Re: Is VIPerl export controlled?

5. Aug 13, 2008 8:09 AM

in response to: znmeb

znmeb

39 posts since
Feb 8, 2004

Well ... according to the FAQ, there may be a problem with VIPerl but not with ActiveState Perl itself:

http://aspn.activestate.com/ASPN/docs/ActivePerl/5.8/faq/ActivePerl-faq2.html

In the PPM section, the following appears:

Cryptographic Packages Unlike the United States, the Export Control List of Canada places no significant restriction on the export of cryptographic software; however, the Canadian Federal Government does require that companies, organizations or individuals that wish to distribute cryptographic software get a permit in order to do so. ActiveState does not currently have this permission, so you must currently access other repositories for the following modules:

Crypt-Blowfish, Crypt-Blowfish_PP
Crypt-CAST5, Crypt-CAST5_PP
Crypt-DH
Crypt-DSA, Crypt-RSA
Crypt-GPG
Crypt-GOST, Crypt-GOST_PP
Crypt-IDEA
Crypt-OpenPGP, Crypt-PGP2, Crypt-PGP5, Crypt-PGPSimple
Crypt-OpenSSL-DSA, Crypt-OpenSSL-RSA, Crypt-OpenSSL-SMIME
Crypt-RC4, Crypt-RC5, Crypt-RC6
Crypt-RIPEMD160
Crypt-Rijndael, Crypt-Rijndael_PP
Crypt-Serpent
Crypt-Twofish, Crypt-Twofish2, TwoFish
Crypt-SSLeay, Net_SSLeay

IIRC Net_SSLeay is bundled in the kit, so there may be an issue. As the saying goes, I am not a lawyer.

Re: Is VIPerl export controlled?

6. Aug 13, 2008 10:32 AM

in response to: znmeb

c_shanklin

754 posts since
Dec 3, 2007

znmeb wrote:The Windows version of the VI Perl Toolkit contains ActiveState Perl and some packages from CPAN. Some of the ActiveState products contain crypto technology. They are export-controlled and can only be sent to the US and Canada. Is that the case for the VI Perl Toolkit?

The VI Perl Toolkit license doesn't allow redistribution by 3rd parties, based on the licenses all users, regardless of location, would have to download it from VMware.

Re: Is VIPerl export controlled?

7. Aug 13, 2008 11:35 AM

in response to: c_shanklin

Texiwill

10,205 posts since
Jan 13, 2004

Hello,

Thank you for clarifying. However, should it not allow for redistribution given that there are now third party tools being written using it? That way they can keep to a specific version of the toolkit and not always get the latest?

Best regards,
Edward L. Haletky
VMware Communities User Moderator
====
Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.
CIO Virtualization Blog: http://www.cio.com/blog/index/topic/168354
As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization

Re: Is VIPerl export controlled?

8. Aug 13, 2008 8:44 PM

in response to: Texiwill

znmeb

39 posts since
Feb 8, 2004

Also, wasn't the VIPerl Toolkit originally hosted on SourceForge and licensed GPL? The 1.5 release had a source tarball available, but the 1.6 release doesn't.

Re: Is VIPerl export controlled?

9. Aug 14, 2008 11:01 AM

in response to: znmeb

c_shanklin

754 posts since
Dec 3, 2007

The original VI Perl toolkit was (and is in fact) on sourceforge, licensed under something called the "common development and distribution license".

True, 1.6 doesn't have a source tarball. You can get the source from within the Linux package, I believe the files under lib/VMware are the ones you want.

Go to original post